CVE-2014-0603

The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption)…

published February 6, 2015

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ A tiny oversight in rftpcom.dll could let attackers trigger memory corruption, causing a denial of service! 🛑 Think of it like a waiter at a restaurant whose notepad is suddenly filled with gibberish—orders get mixed up, and customers are left starving while the kitchen’s in chaos. 🍽️ This vulnerability could allow an attacker to create a system meltdown, potentially executing arbitrary code on the affected machine. The result? Major disruptions and loss of control over your system, leading to possible data theft or system crashes!

Put simply

Think of it like a waiter at a restaurant whose notepad is suddenly filled with gibberish—orders get mixed up, and customers are left starving while the kitchen’s in chaos. 🍽️ The rftpcom.dll ActiveX control in the Attachmate Reflection FTP Client is vulnerable due to memory corruption triggered by methods like GetGlobalSettings and GetSiteProperties3, which can dereference arbitrary memory addresses.

What to do

This vulnerability could allow an attacker to create a system meltdown, potentially executing arbitrary code on the affected machine. The result? Major disruptions and loss of control over your system, leading to possible data theft or system crashes! Update your Attachmate Reflection FTP Client to version 14.1.429 or later to patch this vulnerability. Regularly audit your ActiveX controls to ensure they are up to date and review your system for any arbitrary code execution signs. 🛡️ You've got this! Stay vigilant, and your security hero status is just a patch away! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05668 · 93.0th percentile
Published
2015-02-06T11:00Z
EPSS history
Timeline
  • 06 FEB 11:00Z
    The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption)…
    cvelistv5